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AMENDMENTS TO THE ABSTRACT 
Please replace the abstract of the disclosure with the following amended abstract. 

A method for remot e incr e m e ntal program verification includ e s r e c e iving content v e rifi e d 
by at l e ast on e cont e nt provid e r, installing the cont e nt on a r e sourc e constrain e d d e vic e and 
issuing th e r e sourc e constrain e d devic e to an e nd user. Th e content includes at l e ast on e 
program unit and e ach program unit includes an Application Programming Interfac e (API) 
definition file and an impl e m e ntation. Each API d e finition fil e defin e s it e ms in its associated 
program unit that ar e mad e accessibl e to one or more oth e r program units, each implem e ntation 
includ e s e x e cutabl e code corr e sponding to the API d e finition file and th e e xecutabl e code 
includes typo sp e cific instructions and data. Th e v e rification includes d e t e rmining binary 
compatibility of earli e r program unit impl e mentations with later program unit implem e ntations 
using th e ir associated API d e finition fil e s. According to on e asp e ct, subs e quent installation of 
content on the resource constrain e d d e vic e is disabl e d. A r e source constrained d e vice includ e s a 
m e mory for providing cont e nt verifi e d by at least on e cont e nt provid e r and a virtual machin e that 
is capabl e of e x e cuting instructions includ e d within th e cont e nt. Th e cont e nt includ e s at l e ast 
one program unit and each program unit includes an Application Programming Int e rfac e (API) 
definition file and an implem e ntation. Th e v e rification includes determining binary 
compatibility of e arlier program unit impl e mentations with lat e r program unit implementations 
using th e ir associat e d i\PI d e finition fil e s. 

Remote incremental program verification may be achieved by receiving content verified 
by at least one content provider, installing the content on a resource-constrained device, issuing 
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the resource-constrained device to an end user, and allowing post-issuance installation of verified 
content on the resource-constrained device by a trusted post-issuance installer. The at least one 
content provider includes an applet provider, a device manufacturer, a device issuer, and a 
trusted post-issuance installer. The content includes at least one program unit, where each 
program unit comprises an AppHcation Programming Literface (APP definition file and an 
implementation. Each API definition file defines items in its associated program unit that are 
made accessible to one or more other program units, and each implementation includes 
executable code corresponding to the API definition file. The executable code includes type- 
specific instructions and data. The verification includes determining binary compatibility of 
earlier program unit implementations with later program unit implementations. 
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ABSTRACT OF DISCLOSURE 



Remote incremental program verification may be achieved by receiving content verified 
by at least one content provider, installing the content on a resource-constrained device, issuing 
the resource-constrained device to an end user, and allowing post-issuance installation of verified 
content on the resource-constrained device by a trusted post-issuance installer. The at least one 
content provider includes an applet provider, a device manufacturer, a device issuer, and a 
trusted post-issuance installer. The content includes at least one program unit, where each 
program unit comprises an Application Programming Interface (API) definition file and an 
implementation. Each API definition file defines items in its associated program unit that are 
made accessible to one or more other program units, and each implementation includes 
executable code corresponding to the API definition file. The executable code includes type- 
specific instructions and data. The verification includes determining binary compatibility of 
earlier program unit implementations with later program unit implementations. 



